
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
File: ur8nIaXXgzW3uX22OuxDXJyji8c.mft (raw, json)
Hash identifier: wBTfgHUgkWf/bOhUuZ2rpl893o01ve2EIw+sKQMwTQM=
Subject key identifier: D2:78:EC:B9:E2:3C:51:1E:9D:BA:6C:FC:49:45:D9:DA:24:9E:14:69
Authority key identifier: BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
Certificate issuer: /CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Certificate serial: 0198477733B8F28EEB9C4DA1FEEA03DD28F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
Manifest number: 07FA
Signing time: Sat 26 Jul 2025 16:00:50 +0000
Manifest this update: Sat 26 Jul 2025 16:00:50 +0000
Manifest next update: Sun 27 Jul 2025 16:00:50 +0000
Files and hashes: 1: ur8nIaXXgzW3uX22OuxDXJyji8c.crl (hash: Mi+XuPk1R6pJuzwwhsTmb91bWBb4tXaf2VPM2tm8qOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:33:b8:f2:8e:eb:9c:4d:a1:fe:ea:03:dd:28:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babf2721a5d78335b7b97db63aec435c9ca38bc7
Validity
Not Before: Jul 26 16:00:50 2025 GMT
Not After : Jul 27 16:00:50 2025 GMT
Subject: CN=d278ecb9e23c511e9dba6cfc4945d9da249e1469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:92:12:a7:07:6b:81:c9:e5:f5:af:13:c7:
7f:41:01:9f:b1:c0:49:c1:ce:a1:9b:78:82:30:e2:
e9:99:60:b6:1d:5c:c6:24:ff:8c:65:34:a5:29:56:
29:a7:a4:23:2e:e1:f3:1e:f8:d5:ec:d6:96:57:52:
65:a3:07:fc:72:92:1e:cf:a8:b6:5b:25:b5:74:f9:
ec:d5:0f:a0:d5:af:34:0b:f8:0f:f4:58:64:7f:72:
fc:8c:bc:9d:12:12:94:9a:f8:67:3e:83:18:f7:ed:
09:6d:02:19:cc:35:91:c1:21:e8:5c:a8:86:9c:c5:
75:59:eb:0d:64:c0:71:3f:de:c6:c2:a2:c1:95:22:
65:9b:38:1f:c0:3d:56:41:1e:d8:d1:d7:49:a1:2e:
05:27:76:a2:82:82:9b:00:36:e3:98:62:3f:7c:6c:
af:10:ce:87:ba:26:dd:86:00:ef:75:b3:bd:77:a8:
25:3c:1f:7f:ea:76:a2:e5:05:48:50:3a:31:9a:ce:
cb:39:11:9a:28:1a:16:42:9d:fb:06:70:1f:fc:04:
ce:2b:0b:54:e3:8b:52:3e:23:ca:65:24:13:62:95:
40:bc:ec:fb:cb:17:2b:65:cb:c7:93:5d:e3:41:b8:
83:7e:5f:d2:ce:fe:9c:a0:22:8b:e9:96:ec:75:2e:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:78:EC:B9:E2:3C:51:1E:9D:BA:6C:FC:49:45:D9:DA:24:9E:14:69
X509v3 Authority Key Identifier:
keyid:BA:BF:27:21:A5:D7:83:35:B7:B9:7D:B6:3A:EC:43:5C:9C:A3:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur8nIaXXgzW3uX22OuxDXJyji8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/cfd7a3-4624-40be-bb23-d7bff119fd5d/1/ur8nIaXXgzW3uX22OuxDXJyji8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:59:29:ea:ed:e0:0f:2b:fc:2f:54:26:2d:75:f4:c6:f0:24:
dc:8a:d8:99:68:bc:a6:7d:8c:c5:a1:a5:43:97:09:76:e1:f9:
c3:f7:c0:7f:b9:6b:28:18:14:21:94:7e:af:3b:49:1b:5f:53:
c2:49:5a:bf:17:a2:33:bb:f5:68:44:25:a8:8b:a6:b6:a6:1d:
93:54:42:65:66:dc:9e:0a:02:de:61:f5:21:9f:39:18:6c:94:
38:9c:1a:b1:9e:75:5b:cb:dc:a3:7f:75:59:ea:ea:1a:c8:20:
2c:f8:69:68:c9:16:ae:fb:15:73:7d:48:c5:2d:d1:93:67:5c:
2c:1f:72:b3:f3:e9:f1:b7:ca:65:49:1a:6d:56:38:99:0d:0f:
44:6f:a5:3d:1c:3b:dd:70:72:49:fe:ff:99:ef:44:c3:a9:ad:
aa:f3:1f:d2:ca:f2:bb:31:8c:ef:0b:f3:32:d5:7a:88:01:23:
4c:88:18:dd:31:94:f9:87:82:fb:35:0f:8a:31:c3:65:46:3a:
d4:d1:0a:1a:d9:e9:20:b0:db:fa:53:35:3f:35:d7:ce:f5:a6:
00:c6:d5:35:c8:ef:02:34:b2:c6:a3:f3:10:3d:4c:a6:21:f7:
d6:c1:18:64:b3:e5:1c:be:13:5c:92:fa:eb:47:c8:f5:de:a6:
85:a4:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:27 2025 by rpki-client